ISO27001 Consultancy

When you’re just beginning your journey towards ISO27001 certification, it can be hard to know where to start. Planning your project and getting approval for it is difficult if you don’t have a clear picture of where you are now, and what you need to do.

The CertiKit ISO27001 Gap Assessment Service answers these questions. Through a series of guided interviews, our consultants will construct a full profile of your organization’s current conformity with the management system requirements and the controls in Annex A of the standard. This profile will be presented as a completed gap assessment spreadsheet with graphs to show conformity.

The gap assessment process includes: 

• An initial meeting to understand your organization’s background, structure and objectives.
• A series of guided interviews with key members of staff in relevant areas.
• Review of relevant existing documentation and records.
• Completed Gap Assessment spreadsheet aligned to the ISO27001:2022 standard.
• Answering any questions about the report and next steps.

We offer ISO27001 consultancy in the following ways:

• Ad-hoc hours or days to cover a few specific areas, such as scope, gap analysis or risk assessment.
• Weekly or monthly meetings to keep the project moving forward.
• Documentation writing to speed up the process.
• A fully managed project to get you to certification fast.

Our consultancy is completely bespoke to your project, contact us today and we’ll provide you with a phased proposal to show you how we can help each step of the way.

One of the main requirements you’ll need to have completed before your organization goes for ISO27001 certification is a full internal audit of your ISMS. This can be a daunting task, especially if it is your first ISO certification audit.

We can help. Delivered remotely by qualified auditors, our 3-day pre-certification audit is an internal review of ALL areas of the ISO27001 standard, including your applicable Annex A controls. The deliverable is a professionally-produced internal audit report that your certification auditor will want to see.

What will the pre-certification audit include?

• An agreed audit plan for the three days.
• Opening meeting to understand your organization and your ISMS.
• An internal audit of ALL areas of the ISO27001 standard, including the applicable Annex A controls.
• Closing meeting to present and discuss the audit results.
• A professionally produced audit report detailing the findings and all areas audited within the ISMS and Statement of Applicability in line with your requested scope.
• Answers to any outstanding questions in your run up to a certification audit.

Our toolkits are used alongside our consultancy services to speed up the process and ensure you’re getting the most up-to-date documentation available.  The CertiKit ISO27001 Toolkit is easily the most comprehensive product on the market today. With 180+ carefully drafted documents, this toolkit has everything you need to implement an ISMS and all of the Annex A controls, and achieve certification to the standard quickly and effectively.